Visit Website →

Recent Items

bdu:2026-10416

bdu:2026-10416
Updated on 2026-10-07T07:09:39.822500+00:00

certfr-2026-avi-0541 — De multiples vulnérabilités ont été découvertes dans Zabbix. Elles permettent à un attaquant de provoquer une atteinte…

certfr-2026-avi-0541
Updated on 2026-10-07T07:09:39.822657+00:00

fkie_cve-2026-23927

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

Updated on 2026-10-07T07:09:39.822701+00:00

GHSA-r8x9-p5v6-vx46

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

Updated on 2026-10-07T07:09:39.822773+00:00

UBUNTU-CVE-2026-23927

Affected: Ubuntu:Pro:14.04:LTS: zabbix, Ubuntu:Pro:16.04:LTS: zabbix, Ubuntu:Pro:18.04:LTS: zabbix, Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix, Ubuntu:25.10: zabbix, Ubuntu:26.04:LTS: zabbix

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

Updated on 2026-10-07T07:09:39.822807+00:00

WID-SEC-W-2026-1375 — Zabbix: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.

Updated on 2026-10-07T07:09:39.822878+00:00